Every live pull is decided by its own payment transaction. Paste a hash โ the chain and our record have to agree, and you can check that without our help.
When your payment confirms, the card is derived from the transaction hash with a keyed hash that only our server holds. Two consequences follow, and both are checkable:
The transaction hash does not exist until you sign and send. Not us, not you โ no one can know the card before the money moves. You also cannot "shop" for a hash: changing your gas settings changes the hash, but you would have to broadcast the payment before you learn the outcome.
The same transaction hash always resolves to the same card. Ask our server to re-run a delivery a hundred times and the answer never changes โ if it ever did, that would be the proof of tampering.
โโโโYou'll find these next to every row in the public pull feed, or in your own wallet history.